last executing test programs: 14.274159113s ago: executing program 4 (id=159): inotify_init() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x4ae, r3) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r4, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkc'], 0x0, &(0x7f00000004c0)=""/90) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.836130096s ago: executing program 4 (id=167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000180)={r0, 0x1, 0x400}) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, {0x0}, 0x400000}) 11.62320326s ago: executing program 1 (id=169): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$loop(0x0, 0x4, 0x12bb41) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) 10.906419728s ago: executing program 1 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x3) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000000000000000000006e0100003801") 8.899898779s ago: executing program 1 (id=177): inotify_init() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x4ae, r3) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r4, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkc'], 0x0, &(0x7f00000004c0)=""/90) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.637980269s ago: executing program 0 (id=180): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) 6.959687348s ago: executing program 1 (id=182): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) pidfd_send_signal(r3, 0x3e, 0x0, 0x0) 6.90580564s ago: executing program 2 (id=183): syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES16], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) 6.297747685s ago: executing program 0 (id=186): openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.29624025s ago: executing program 4 (id=187): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x3) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000000000000000000006e0100003801") 6.229956779s ago: executing program 3 (id=188): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000580)=0x8) 6.228174907s ago: executing program 2 (id=189): write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) 5.970808863s ago: executing program 3 (id=190): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) preadv(r1, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/213, 0xd5}], 0x1, 0xffff, 0x9) ppoll(&(0x7f0000000240)=[{r0, 0x8000}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 5.970387871s ago: executing program 2 (id=191): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f0000000280)={&(0x7f0000000040)='+\xd1@\x00', &(0x7f0000000240)='overlay\x00', 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r4, r5]}}], 0x18, 0xcc040}, 0x26048040) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 5.94954555s ago: executing program 0 (id=192): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) syz_emit_ethernet(0x57, &(0x7f0000000780)={@random="816c6003122a", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x1d, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "000106000000000060000240cd"}}}}}}}, 0x0) 5.940350655s ago: executing program 4 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xff}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='highspeed', 0x9) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x400840, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) unshare(0x4000400) fallocate(0xffffffffffffffff, 0x0, 0xb237, 0x10003) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') 4.494822171s ago: executing program 2 (id=194): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x35, 0xbb, 0x9b, 0x8, 0x10b8, 0x1e6e, 0x9fdb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x3, 0x10, 0x10, "", [{{0x9, 0x4, 0x21, 0x7, 0x0, 0x40, 0x82, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001140)={0x14, 0x0, &(0x7f0000001100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc27}}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000001400)={0x14, 0x0, &(0x7f00000013c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002240)={0x44, &(0x7f0000002040)={0x0, 0x11, 0x2, "0225"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.494534935s ago: executing program 0 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='\\x01000000 2147483647 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000', 0x56) 4.415915754s ago: executing program 3 (id=196): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8c00, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=@ipv4_newroute={0x24, 0x1a, 0x200, 0x70bd26, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DST={0x8, 0x1, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000050}, 0x20000050) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) syz_usb_control_io$hid(r4, 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000280)={0x0, 0x5, 0x4, &(0x7f0000000080)={0x9, "b3d92cdddf96c20e9064264ccfc6000000fa00008c0000c87fb100000000000100"}}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000170a010200000000000000000200fffc090001ee72797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x20048005}, 0x40000) 4.363006004s ago: executing program 4 (id=197): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0xae7, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x127}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r9 = syz_open_pts(0xffffffffffffffff, 0x400000) ioctl$TIOCMBIC(r9, 0x5417, &(0x7f0000000000)=0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x9840) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000100008000ae101a80", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x48008) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0x3e0e, 0x400, 0x0, 0x28e}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8bf, 0x40, 0x2, 0x9a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x200, 0x0, 0x3b2, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x800, 0x0, 0x16a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x400, 0x3, 0x201}}], 0x4, &(0x7f0000001f40)={0x2e, 0x44, 0x0, r8, 0xc0107523, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, r6, '\x00', {0x3, 0xb59, 0x100104, 0x0}}, 0x0) 4.259426416s ago: executing program 0 (id=198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000180)={r0, 0x1, 0x400}) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, {0x0}, 0x400000}) 3.290665534s ago: executing program 2 (id=199): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x83, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) syz_usb_connect$uac1(0x5, 0xbc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa00030156c0020904000000010100000a24010101bb02010211250601040507000a00080003000200050524050628bf965701ab81a617db84c1f9f31ff90f0f245e810504020002000a00e8ff040c240202030202508000090111240605020507002e134a004ef10200000924030102020505"], &(0x7f0000000280)={0x0, 0x0, 0x4a, 0x0}) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100"], 0xb4}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.119787229s ago: executing program 4 (id=200): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000020)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl(r2, 0x8914, &(0x7f0000000100)="63616e300000000000000000000000000100"/40) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x65) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000210)=0x31) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000220)=0x63) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000230)=0xd) write(r0, &(0x7f0000000240)='e1c\r', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 764.149429ms ago: executing program 3 (id=201): write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) 561.643812ms ago: executing program 1 (id=202): openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 388.518118ms ago: executing program 3 (id=203): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x88400, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 388.150129ms ago: executing program 2 (id=204): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x40) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 343.157851ms ago: executing program 0 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r2, 0x0, 0x0, 0x1000f4) sendfile(r2, r2, 0x0, 0x40000000800) fallocate(0xffffffffffffffff, 0x100000000000011, 0x2000, 0x2f93) 220.285446ms ago: executing program 1 (id=206): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fcf000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000e80)={"04dfc86351907bcbc9293982262169af775bedfb0a63cb8031c328f61ac038da9e81e6847961e656af1a9f48ac011b67d68f8725991345a1f8ed6450a11246c6424cd7837f6bfc47209662ba0d0f44149fcefbbf6fa5b40644bce6cf7210107f57b850d0c9af06c766af1c637aa057167a6910e2e185b8d972e49eeda481d9a58394ef43958ce7407e73d6460653fc672aa4ab6a26bd1a631fa3a0f2b025ba137b8e3f933af28e1ea9984bc0438ea00b5f5b16a93a22bb83ff1c92407a946d4dc7d347d526db0e71bb38f873937ca7343fb7248867adf5decd52e74f05c768c3b1c8282b9b1b1bc0f7ae08917b2abe3d3305e32b8db562d19dd7c83fde6dbe03ef72aa7ddc00144895b2a1981105046a28ca0852521a65d4000000000000e36417a251af7100392b6cdb0bbed4670d746c45fb5589f279cfd594911cb11f2a7336af10b2332e731f2eec8287c735f2346449f1629fde95d6c78bed90645bb280e222976d5721ee6dd6068cfd6174d2382e524672a2656eed5cf34eff27c2974deebf2aa6226e3fa2f15ea8db5891a062d422607a06000000dfaaeadfb2498e79fe9e47089b2a8bbdbdcbb076ebbd9c8fdc6246c00a34176a1c46a924ab4c3877215e5666c7b384e9238b3ad6ac559d90e22170d6915c7150a1858eb3f20a1847642018840b49c335074496991fb3193914f5213846ff8bf5b389298d797dfdd4a1d116caec17f13152c9699caab72a96d364134266030e67ada0de8d2bb05091f7d855fe1c435574856b0f8de9dc6af14ce179e3c0b6b563ccb8e02900fa9412784b0e5fa71a6e4499fecd1343d289daeb929d0cbd96f9f4501bc9d6d9d0b4f462aaf2d56ce92ae6438bb3e3aa258c8c4ba6646f99f5a3d4f14f677353722cc81a8ef1f68d41ad1bef785b248faee830613461239487bee1b53724eb28301420ced16a8110a8680c91c665f8eff65e2d48f95db7ad4f30d079a39a2286fb3df3472d330f6f11fc7d1939a923c502630004314037ec808df7cec279df5785fa2124d1650563799defc378cb9506ee7142eb108b3f4125ade3d9a73646bfdac795c753895b2ad51d358eff496d1c1a885c30b85b50eca89bf14ee50ae3301805f1691b3a391d7575c9a0a514710ad3e590491c60bdab122222c66cbb155452a01cb9750d14ffdc77ad11d4495c53bf38c8185c769c1409ebac8101d6784c9510790dd1df8fa6f2b4dbdbde3bdcbf6bfc456f68b680f2595853178e89a32e9c56d66fd2210fb0fc0e3cda61e6980e16e47ae8071182af80950c43ba221fe072e6945107a6edcd38bfeb201a657969bf340960a67e30987e56c953a177404fdf67b5d99bbc06d705a0fc9659336b458ea0d575ddfe59706738d1e65c50527200"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=207): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xff}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='highspeed', 0x9) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x400840, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) unshare(0x4000400) fallocate(0xffffffffffffffff, 0x0, 0xb237, 0x10003) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts. [ 90.763773][ T5576] cgroup: Unknown subsys name 'net' [ 91.047635][ T5576] cgroup: Unknown subsys name 'cpuset' [ 91.119884][ T5576] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.127058][ T122] cfg80211: failed to load regulatory.db [ 93.314059][ T5576] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.044922][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.081280][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.082387][ T5602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.083539][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.113696][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.126698][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.152001][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.154411][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.155927][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.156605][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.164461][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.166341][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.168750][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.203884][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.204315][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.206822][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.208504][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.217167][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.217362][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.240981][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.263738][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.266653][ T4905] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.288188][ T4905] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.293385][ T4905] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.299491][ T5599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.430690][ T60] Bluetooth: hci3: command tx timeout [ 98.430880][ T5606] Bluetooth: hci2: command tx timeout [ 98.509544][ T5606] Bluetooth: hci0: command tx timeout [ 98.509738][ T5606] Bluetooth: hci4: command tx timeout [ 98.509825][ T5606] Bluetooth: hci1: command tx timeout [ 99.266373][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.267557][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.267704][ T5588] bridge_slave_0: entered allmulticast mode [ 99.274458][ T5588] bridge_slave_0: entered promiscuous mode [ 99.321160][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.321279][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.321406][ T5589] bridge_slave_0: entered allmulticast mode [ 99.323393][ T5589] bridge_slave_0: entered promiscuous mode [ 99.371518][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.371632][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.372146][ T5588] bridge_slave_1: entered allmulticast mode [ 99.374123][ T5588] bridge_slave_1: entered promiscuous mode [ 99.410658][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.410784][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.410909][ T5589] bridge_slave_1: entered allmulticast mode [ 99.412877][ T5589] bridge_slave_1: entered promiscuous mode [ 99.450734][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.450866][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.450999][ T5590] bridge_slave_0: entered allmulticast mode [ 99.453198][ T5590] bridge_slave_0: entered promiscuous mode [ 99.544613][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.544734][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.545250][ T5590] bridge_slave_1: entered allmulticast mode [ 99.547114][ T5590] bridge_slave_1: entered promiscuous mode [ 99.583754][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.583854][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.583980][ T5592] bridge_slave_0: entered allmulticast mode [ 99.586380][ T5592] bridge_slave_0: entered promiscuous mode [ 99.637297][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.637428][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.637603][ T5591] bridge_slave_0: entered allmulticast mode [ 99.644462][ T5591] bridge_slave_0: entered promiscuous mode [ 99.689074][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.689594][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.689731][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.696017][ T5592] bridge_slave_1: entered allmulticast mode [ 99.701176][ T5592] bridge_slave_1: entered promiscuous mode [ 99.735790][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.748427][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.748563][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.748717][ T5591] bridge_slave_1: entered allmulticast mode [ 99.764934][ T5591] bridge_slave_1: entered promiscuous mode [ 99.796122][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.822701][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.853547][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.923746][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.951174][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.976973][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.009760][ T5588] team0: Port device team_slave_0 added [ 100.013077][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.015115][ T5589] team0: Port device team_slave_0 added [ 100.017844][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.066871][ T5588] team0: Port device team_slave_1 added [ 100.095410][ T5589] team0: Port device team_slave_1 added [ 100.122823][ T5590] team0: Port device team_slave_0 added [ 100.197853][ T5590] team0: Port device team_slave_1 added [ 100.220819][ T5592] team0: Port device team_slave_0 added [ 100.245186][ T5591] team0: Port device team_slave_0 added [ 100.265768][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.265784][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.265804][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.276921][ T5592] team0: Port device team_slave_1 added [ 100.281631][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.281674][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.281748][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.334444][ T5591] team0: Port device team_slave_1 added [ 100.381744][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.381764][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.381793][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.444362][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.444380][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.444405][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.509312][ T60] Bluetooth: hci2: command tx timeout [ 100.509349][ T60] Bluetooth: hci3: command tx timeout [ 100.512750][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.512764][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.512783][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.590819][ T5606] Bluetooth: hci1: command tx timeout [ 100.590858][ T60] Bluetooth: hci4: command tx timeout [ 100.590875][ T5606] Bluetooth: hci0: command tx timeout [ 101.024759][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.024778][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.024809][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.031163][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.031223][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.031307][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.075034][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.075084][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.075158][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.171077][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.171097][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.171128][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.178810][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.178837][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.178886][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.383279][ T5588] hsr_slave_0: entered promiscuous mode [ 101.384511][ T5588] hsr_slave_1: entered promiscuous mode [ 101.403604][ T5589] hsr_slave_0: entered promiscuous mode [ 101.404552][ T5589] hsr_slave_1: entered promiscuous mode [ 101.405281][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 101.405378][ T5589] Cannot create hsr debugfs directory [ 101.478266][ T5590] hsr_slave_0: entered promiscuous mode [ 101.481872][ T5590] hsr_slave_1: entered promiscuous mode [ 101.484798][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 101.484835][ T5590] Cannot create hsr debugfs directory [ 101.555172][ T5592] hsr_slave_0: entered promiscuous mode [ 101.556434][ T5592] hsr_slave_1: entered promiscuous mode [ 101.557114][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 101.557133][ T5592] Cannot create hsr debugfs directory [ 101.600543][ T5591] hsr_slave_0: entered promiscuous mode [ 101.601598][ T5591] hsr_slave_1: entered promiscuous mode [ 101.602388][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 101.602406][ T5591] Cannot create hsr debugfs directory [ 102.589356][ T5599] Bluetooth: hci3: command tx timeout [ 102.589394][ T5599] Bluetooth: hci2: command tx timeout [ 102.670234][ T5599] Bluetooth: hci1: command tx timeout [ 102.670335][ T5606] Bluetooth: hci0: command tx timeout [ 102.675831][ T5588] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.681073][ T5606] Bluetooth: hci4: command tx timeout [ 102.755114][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.762361][ T5588] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.823984][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.832120][ T5588] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.858708][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.884804][ T5588] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.917693][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.063719][ T5589] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.103396][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.109587][ T5589] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.155341][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.185697][ T5589] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.212983][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.240976][ T5589] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.286730][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.458097][ T5590] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.494714][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.498622][ T5590] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.523486][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.557539][ T5590] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.575283][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.595089][ T5590] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.633584][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.745012][ T5591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.773314][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.778297][ T5591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.830360][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.856140][ T5591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.895858][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.933706][ T5591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.963274][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.077790][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.161814][ T5592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.206484][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.226560][ T5592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.264404][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.279899][ T5592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.322645][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.340714][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.341116][ T5592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.393763][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.448645][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.448815][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.478791][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.547293][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.547406][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.661828][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.669731][ T5606] Bluetooth: hci2: command tx timeout [ 104.669767][ T5606] Bluetooth: hci3: command tx timeout [ 104.728711][ T3401] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.728897][ T3401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.749319][ T5599] Bluetooth: hci4: command tx timeout [ 104.749358][ T5599] Bluetooth: hci0: command tx timeout [ 104.749385][ T5599] Bluetooth: hci1: command tx timeout [ 104.807085][ T1529] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.807261][ T1529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.841262][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.975493][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.989050][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.052025][ T3366] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.052275][ T3366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.137208][ T1529] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.137432][ T1529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.197732][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.282480][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.315511][ T1529] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.315737][ T1529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.388618][ T1529] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.388805][ T1529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.472309][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.621275][ T1529] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.621416][ T1529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.699739][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.699852][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.244995][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.716769][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.281044][ T5589] veth0_vlan: entered promiscuous mode [ 107.321439][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.433589][ T5589] veth1_vlan: entered promiscuous mode [ 107.610736][ T5588] veth0_vlan: entered promiscuous mode [ 107.660469][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.693405][ T5588] veth1_vlan: entered promiscuous mode [ 107.726684][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.756296][ T5589] veth0_macvtap: entered promiscuous mode [ 107.807687][ T5589] veth1_macvtap: entered promiscuous mode [ 107.823192][ T5590] veth0_vlan: entered promiscuous mode [ 107.877043][ T5590] veth1_vlan: entered promiscuous mode [ 107.913274][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.940740][ T5588] veth0_macvtap: entered promiscuous mode [ 107.973576][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.007217][ T5588] veth1_macvtap: entered promiscuous mode [ 108.016307][ T5591] veth0_vlan: entered promiscuous mode [ 108.105818][ T5592] veth0_vlan: entered promiscuous mode [ 108.138083][ T5591] veth1_vlan: entered promiscuous mode [ 108.286225][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.348724][ T5590] veth0_macvtap: entered promiscuous mode [ 108.370508][ T5592] veth1_vlan: entered promiscuous mode [ 108.397102][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.500758][ T5590] veth1_macvtap: entered promiscuous mode [ 108.789836][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.855348][ T5591] veth0_macvtap: entered promiscuous mode [ 108.856785][ T3399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.856809][ T3399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.945757][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.037458][ T5591] veth1_macvtap: entered promiscuous mode [ 109.123874][ T5592] veth0_macvtap: entered promiscuous mode [ 109.187482][ T3366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.187506][ T3366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.231232][ T5592] veth1_macvtap: entered promiscuous mode [ 109.413438][ T1523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.413472][ T1523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.518989][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.635416][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.670006][ T5589] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.923497][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.988337][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.988361][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.018566][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.168283][ T5789] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 110.218114][ T5785] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 110.356138][ T3401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.356161][ T3401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.470213][ T13] IPVS: starting estimator thread 0... [ 111.559915][ T5795] IPVS: using max 7 ests per chain, 16800 per kthread [ 111.836628][ T1523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.836694][ T1523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.814396][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.814420][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.980789][ T5812] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.182602][ T1529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.182639][ T1529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.291900][ T5815] Bluetooth: ISO socket layer initialized [ 113.383334][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.383355][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.405641][ T1529] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.828953][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.828977][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.913639][ T33] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.914591][ T33] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.915667][ T33] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.916050][ T33] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.917068][ T33] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.917448][ T33] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.059358][ T33] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.511762][ T89] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.544933][ T3366] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.561383][ T153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.037138][ T13] IPVS: starting estimator thread 0... [ 115.134813][ T5827] IPVS: using max 9 ests per chain, 21600 per kthread [ 115.229668][ T153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.230205][ T153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.230660][ T153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.271435][ T153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.275358][ T153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.275854][ T153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.276066][ T153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.276258][ T153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.353536][ T153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.903017][ T5836] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 116.947900][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 117.632013][ T5850] ipvlan0: entered promiscuous mode [ 123.296394][ T5594] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 123.506674][ T5594] usb 1-1: unable to get BOS descriptor or descriptor too short [ 123.548564][ T5594] usb 1-1: not running at top speed; connect to a high speed hub [ 123.548699][ T5594] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 123.607385][ T5594] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 123.607419][ T5594] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 123.607443][ T5594] usb 1-1: config 14 has no interface number 0 [ 123.607462][ T5594] usb 1-1: config 14 has no interface number 1 [ 123.607550][ T5594] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 123.607578][ T5594] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 123.607606][ T5594] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 123.607638][ T5594] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.607668][ T5594] usb 1-1: config 14 interface 57 has no altsetting 0 [ 123.607688][ T5594] usb 1-1: config 14 interface 228 has no altsetting 0 [ 123.727405][ T5594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.727440][ T5594] usb 1-1: Product: syz [ 123.727459][ T5594] usb 1-1: Manufacturer: syz [ 123.727470][ T5594] usb 1-1: SerialNumber: syz [ 124.856872][ T5594] legousbtower 1-1:14.57: interrupt endpoints not found [ 125.188356][ T5594] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 125.356686][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 126.183027][ T5594] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 126.656421][ T5700] usb 1-1: USB disconnect, device number 2 [ 127.357066][ T5700] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 129.282368][ T5935] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 129.282398][ T5935] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.611486][ T5935] vhci_hcd vhci_hcd.0: Device attached [ 129.642323][ T5932] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 129.642356][ T5932] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.642439][ T5932] vhci_hcd vhci_hcd.0: Device attached [ 129.672109][ T5941] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 129.672141][ T5941] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.744220][ T5944] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(6) [ 129.744254][ T5944] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.874779][ T5932] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(17) [ 129.874813][ T5932] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.874904][ T5932] vhci_hcd vhci_hcd.0: Device attached [ 129.892316][ T5941] vhci_hcd vhci_hcd.0: Device attached [ 129.897247][ T5944] vhci_hcd vhci_hcd.0: Device attached [ 129.930702][ T5932] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(14) [ 129.930733][ T5932] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.930793][ T5932] vhci_hcd vhci_hcd.0: Device attached [ 129.936420][ T5932] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(19) [ 129.936447][ T5932] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 129.936588][ T5932] vhci_hcd vhci_hcd.0: Device attached [ 129.938893][ T5936] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(10) [ 129.938919][ T5936] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 130.098741][ T5936] vhci_hcd vhci_hcd.0: Device attached [ 130.108586][ T5947] vhci_hcd: connection closed [ 130.108669][ T5952] vhci_hcd: connection closed [ 130.118188][ T5950] vhci_hcd: connection closed [ 130.182110][ T5942] vhci_hcd: connection closed [ 130.182185][ T5949] vhci_hcd: connection closed [ 130.203519][ T5937] vhci_hcd: connection closed [ 130.204174][ T5938] vhci_hcd: connection closed [ 130.204572][ T5945] vhci_hcd: connection closed [ 130.241259][ T1529] vhci_hcd vhci_hcd.0: stop threads [ 130.242051][ T1529] vhci_hcd vhci_hcd.0: release socket [ 130.242329][ T1529] vhci_hcd vhci_hcd.0: disconnect device [ 130.281510][ T1529] vhci_hcd vhci_hcd.0: stop threads [ 130.281543][ T1529] vhci_hcd vhci_hcd.0: release socket [ 130.357205][ T1529] vhci_hcd vhci_hcd.0: disconnect device [ 130.372550][ T1529] vhci_hcd vhci_hcd.0: stop threads [ 130.372577][ T1529] vhci_hcd vhci_hcd.0: release socket [ 130.372658][ T1529] vhci_hcd vhci_hcd.0: disconnect device [ 130.373444][ T1529] vhci_hcd vhci_hcd.0: stop threads [ 130.373457][ T1529] vhci_hcd vhci_hcd.0: release socket [ 130.373508][ T1529] vhci_hcd vhci_hcd.0: disconnect device [ 130.384741][ T1529] vhci_hcd vhci_hcd.0: stop threads [ 130.384803][ T1529] vhci_hcd vhci_hcd.0: release socket [ 130.385014][ T1529] vhci_hcd vhci_hcd.0: disconnect device [ 130.389169][ T1529] vhci_hcd vhci_hcd.0: stop threads [ 130.389188][ T1529] vhci_hcd vhci_hcd.0: release socket [ 130.389258][ T1529] vhci_hcd vhci_hcd.0: disconnect device [ 130.390806][ T1529] vhci_hcd vhci_hcd.0: stop threads [ 130.390837][ T1529] vhci_hcd vhci_hcd.0: release socket [ 130.390887][ T1529] vhci_hcd vhci_hcd.0: disconnect device [ 130.409002][ T1529] vhci_hcd vhci_hcd.0: stop threads [ 130.409024][ T1529] vhci_hcd vhci_hcd.0: release socket [ 130.409691][ T1529] vhci_hcd vhci_hcd.0: disconnect device [ 133.366364][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.400265][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.386113][ T5973] Bluetooth: MGMT ver 1.23 [ 135.369210][ T5700] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.529379][ T5700] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 135.531180][ T5700] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 135.531231][ T5700] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 135.531489][ T5700] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 135.531520][ T5700] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 135.531563][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.040036][ T6002] random: crng reseeded on system resumption [ 136.899219][ T5784] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 137.089300][ T5784] usb 4-1: Using ep0 maxpacket: 32 [ 137.090270][ T5784] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 137.092064][ T5784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.214600][ T5784] usb 4-1: config 0 descriptor?? [ 137.487806][ T5784] as10x_usb: device has been detected [ 137.502440][ T5784] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 137.683251][ T5983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 137.966207][ T5784] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 138.373427][ T5784] as10x_usb: error during firmware upload part1 [ 138.373510][ T5784] Registered device nBox DVB-T Dongle [ 139.147234][ T5700] ims_pcu 1-1:1.0: Failed to set line state, error: -71 [ 139.149323][ C0] ims_pcu 1-1:1.0: ims_pcu_irq - usb_submit_urb failed with result -1 [ 139.216516][ T5700] ims_pcu 1-1:1.0: probe with driver ims_pcu failed with error -71 [ 139.363265][ T5700] usb 1-1: USB disconnect, device number 3 [ 140.036619][ T31] usb 4-1: USB disconnect, device number 2 [ 140.441726][ T31] Unregistered device nBox DVB-T Dongle [ 140.513212][ T31] as10x_usb: device has been disconnected [ 141.162748][ T6037] gfs2: error -5 reading superblock [ 145.009305][ T5784] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.162713][ T5784] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 145.182342][ T5784] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 145.182396][ T5784] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 145.182427][ T5784] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 145.182454][ T5784] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 145.182498][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.319593][ T6062] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.762199][ T5784] ims_pcu 1-1:1.0: GET_INFO command failed, error: -71 [ 145.764046][ T5784] ims_pcu 1-1:1.0: probe with driver ims_pcu failed with error -71 [ 146.149262][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 146.149549][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 146.279492][ T9] usb 4-1: device descriptor read/64, error -32 [ 146.551989][ T5784] usb 1-1: USB disconnect, device number 4 [ 146.609241][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.789272][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 146.791538][ T9] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 146.844479][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.884915][ T9] usb 4-1: config 0 descriptor?? [ 146.918363][ T9] as10x_usb: device has been detected [ 146.926863][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 147.063891][ T9] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 147.100100][ T9] as10x_usb: error during firmware upload part1 [ 147.100177][ T9] Registered device nBox DVB-T Dongle [ 153.729228][ T5933] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 153.828234][ T5784] usb 4-1: USB disconnect, device number 4 [ 153.879198][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 153.880189][ T5933] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 153.881904][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.881957][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.951400][ T5933] usb 2-1: config 0 descriptor?? [ 154.259937][ T6143] gfs2: error -5 reading superblock [ 154.302067][ T5933] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 154.406283][ T6129] as102_open: can't find device for minor 0 [ 155.991583][ T5933] usb 2-1: USB disconnect, device number 2 [ 156.141789][ T6150] as102_open: can't find device for minor 0 [ 156.292937][ T6152] netlink: 'syz.1.83': attribute type 4 has an invalid length. [ 156.292966][ T6152] netlink: 17 bytes leftover after parsing attributes in process `syz.1.83'. [ 157.251489][ T5784] Unregistered device nBox DVB-T Dongle [ 157.263760][ T5784] as10x_usb: device has been disconnected [ 157.569130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 159.349368][ T38] audit: type=1800 audit(1789686231.324:2): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.89" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 164.170637][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 164.332646][ T31] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= 1.00 [ 164.336130][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.336186][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.336233][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.408254][ T31] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 164.707064][ T31] gspca_m5602: Failed to find a sensor [ 164.707082][ T31] ALi m5602 2-1:1.0: ALi m5602 webcam failed [ 164.775877][ T31] usb 2-1: USB disconnect, device number 3 [ 165.415814][ T6219] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 165.617677][ T6219] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 165.617713][ T6219] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 165.617730][ T6219] UDF-fs: Scanning with blocksize 512 failed [ 165.803470][ T6219] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 165.803725][ T6219] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 165.803749][ T6219] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 165.803764][ T6219] UDF-fs: Scanning with blocksize 1024 failed [ 165.847711][ T6219] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 165.847874][ T6219] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 165.847895][ T6219] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 165.847909][ T6219] UDF-fs: Scanning with blocksize 2048 failed [ 165.908953][ T6219] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 165.962734][ T6219] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 165.962768][ T6219] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 165.962783][ T6219] UDF-fs: Scanning with blocksize 4096 failed [ 165.962795][ T6219] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 171.892575][ T6266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.389255][ T5785] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 173.667812][ T5785] usb 1-1: Using ep0 maxpacket: 32 [ 173.673290][ T5785] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 173.686168][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.834686][ T5785] usb 1-1: config 0 descriptor?? [ 174.045317][ T5785] as10x_usb: device has been detected [ 174.046270][ T5785] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 174.426281][ T5785] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 174.460329][ T5785] as10x_usb: error during firmware upload part1 [ 174.469757][ T5785] Registered device nBox DVB-T Dongle [ 174.848914][ T1247] usb 1-1: USB disconnect, device number 5 [ 175.140989][ T1247] Unregistered device nBox DVB-T Dongle [ 175.174219][ T1247] as10x_usb: device has been disconnected [ 175.747744][ T6288] bond1: entered allmulticast mode [ 175.748497][ T6288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.009939][ T6295] netlink: 14 bytes leftover after parsing attributes in process `syz.2.122'. [ 178.031039][ T1014] IPVS: starting estimator thread 0... [ 178.169515][ T6306] IPVS: using max 7 ests per chain, 16800 per kthread [ 178.697542][ T6295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.843764][ T6295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.899500][ T6295] bond0 (unregistering): Released all slaves [ 179.960499][ T5599] Bluetooth: hci0: command 0x0c13 tx timeout [ 179.960776][ T5606] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 180.023373][ T6318] i2c i2c-0: delete_device: Can't find device in list [ 182.506374][ T6345] Zero length message leads to an empty skb [ 182.612078][ T6345] lo speed is unknown, defaulting to 1000 [ 182.612949][ T6345] lo speed is unknown, defaulting to 1000 [ 182.819112][ T6345] lo speed is unknown, defaulting to 1000 [ 182.932484][ T6345] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 182.932641][ T6345] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 182.932698][ T6345] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 183.076068][ T6345] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 183.397642][ T6345] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 185.945251][ T6345] lo speed is unknown, defaulting to 1000 [ 186.038750][ T6345] lo speed is unknown, defaulting to 1000 [ 186.221071][ T6345] lo speed is unknown, defaulting to 1000 [ 186.296497][ T6345] lo speed is unknown, defaulting to 1000 [ 186.340303][ T6345] lo speed is unknown, defaulting to 1000 [ 186.729318][ T5785] lo speed is unknown, defaulting to 1000 [ 187.695652][ T6359] syz.4.142 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 189.103355][ T5700] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 189.679430][ T5700] usb 4-1: Using ep0 maxpacket: 8 [ 189.680314][ T5700] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 189.682401][ T5700] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.682427][ T5700] usb 4-1: config 0 has no interface number 0 [ 189.682472][ T5700] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.682504][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.863818][ T5700] usb 4-1: config 0 descriptor?? [ 189.900863][ T5700] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 190.451791][ T5700] usb 4-1: USB disconnect, device number 5 [ 192.640857][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 193.877106][ T10] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 0.00 [ 194.619177][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.620344][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.934958][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 195.935002][ T10] usb 1-1: can't read configurations, error -71 [ 195.977367][ T6412] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 197.129289][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 197.284996][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.286674][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.286700][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 197.286752][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.296418][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.296485][ T10] usb 1-1: Product: syz [ 197.296552][ T10] usb 1-1: Manufacturer: syz [ 197.296595][ T10] usb 1-1: SerialNumber: syz [ 197.591742][ T10] cdc_ncm 1-1:1.0: skipping garbage [ 197.591772][ T10] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 197.591822][ T10] cdc_ncm 1-1:1.0: bind() failure [ 198.597664][ T10] usb 1-1: USB disconnect, device number 7 [ 201.184229][ T6467] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 202.774655][ T6482] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 202.775001][ T6482] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 202.775024][ T6482] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 202.775039][ T6482] UDF-fs: Scanning with blocksize 512 failed [ 202.850738][ T6482] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 202.850950][ T6482] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 202.850972][ T6482] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 202.850987][ T6482] UDF-fs: Scanning with blocksize 1024 failed [ 202.853789][ T6482] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 202.853965][ T6482] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 202.853987][ T6482] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 202.854002][ T6482] UDF-fs: Scanning with blocksize 2048 failed [ 202.936456][ T6482] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 202.936634][ T6482] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 202.936657][ T6482] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 202.936672][ T6482] UDF-fs: Scanning with blocksize 4096 failed [ 202.936684][ T6482] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 204.353129][ T6510] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 206.741330][ T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 207.330041][ T10] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 208.225928][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.225963][ T10] usb 4-1: Product: syz [ 208.226039][ T10] usb 4-1: Manufacturer: syz [ 208.226097][ T10] usb 4-1: SerialNumber: syz [ 208.459127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.479127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.489111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.499098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.509103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.519103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.529104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.539094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.549127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 209.237255][ T10] usb 4-1: config 0 descriptor?? [ 209.571416][ T10] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate [ 209.571464][ T10] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 209.633566][ T10] usb 4-1: USB disconnect, device number 6 [ 210.232170][ T38] audit: type=1800 audit(1789686282.234:3): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.205" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 210.291614][ T6549] can0: slcan on pts0. [ 210.450188][ C1] ------------[ cut here ]------------ [ 210.450209][ C1] 1 [ 210.450224][ C1] WARNING: ./include/linux/skbuff.h:3003 at __netif_receive_skb_core+0x294/0x30c0, CPU#1: kworker/u8:18/3399 [ 210.472331][ C1] Modules linked in: [ 210.476500][ C1] CPU: 1 UID: 0 PID: 3399 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 210.486672][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.497166][ C1] Workqueue: events_unbound flush_to_ldisc [ 210.503111][ C1] RIP: 0010:__netif_receive_skb_core+0x294/0x30c0 [ 210.509642][ C1] Code: f8 4d 8d b7 b8 00 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 87 2a 00 00 45 8b 36 41 29 de eb 0c e8 0d 8c 9c f8 90 <0f> 0b 90 45 31 f6 48 8d 9c 24 e0 00 00 00 48 c7 84 24 b0 00 00 00 [ 210.529344][ C1] RSP: 0018:ffffc9000fb47200 EFLAGS: 00010246 [ 210.535485][ C1] RAX: ffffffff892a0f53 RBX: 000000000000ffff RCX: ffff8880331bbe80 [ 210.543817][ C1] RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000000000000100 [ 210.552227][ C1] RBP: ffffc9000fb47430 R08: 0000000000000100 R09: 0000000000000100 [ 210.560286][ C1] R10: dffffc0000000000 R11: fffffbfff1f640f0 R12: 0000000000000000 [ 210.568787][ C1] R13: dffffc0000000000 R14: 0000000000000040 R15: ffff8880318f0140 [ 210.577019][ C1] FS: 0000000000000000(0000) GS:ffff888125ccb000(0000) knlGS:0000000000000000 [ 210.586244][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.593181][ C1] CR2: 00005636fa709f30 CR3: 00000000318b6000 CR4: 00000000003526f0 [ 210.601353][ C1] Call Trace: [ 210.604680][ C1] [ 210.607695][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 210.613014][ C1] ? __lock_acquire+0x747/0x2de0 [ 210.618042][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 210.624477][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 210.630650][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 210.636537][ C1] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 210.642034][ C1] ? lock_acquire+0x115/0x350 [ 210.646892][ C1] ? process_backlog+0x261/0xc50 [ 210.652190][ C1] process_backlog+0x351/0xc50 [ 210.657032][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 210.662435][ C1] __napi_poll+0xae/0x550 [ 210.666833][ C1] net_rx_action+0x621/0xd70 [ 210.672025][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 210.678259][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 210.684929][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 210.690357][ C1] ? rt_spin_unlock+0x165/0x200 [ 210.695288][ C1] handle_softirqs+0x1da/0x6d0 [ 210.700172][ C1] __local_bh_enable_ip+0x16f/0x2b0 [ 210.705457][ C1] netif_rx+0xb9/0xf0 [ 210.709546][ C1] slcan_receive_buf+0x1c5f/0x2140 [ 210.714739][ C1] ? __pfx_slcan_receive_buf+0x10/0x10 [ 210.720308][ C1] ? ldsem_down_read_trylock+0x13d/0x1b0 [ 210.725996][ C1] ? tty_ldisc_ref+0x1c/0x90 [ 210.730673][ C1] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 210.736721][ C1] ? __pfx_slcan_receive_buf+0x10/0x10 [ 210.742274][ C1] tty_ldisc_receive_buf+0x119/0x160 [ 210.747626][ C1] tty_port_default_receive_buf+0x6e/0xa0 [ 210.753441][ C1] flush_to_ldisc+0x247/0x6c0 [ 210.758177][ C1] ? process_scheduled_works+0x97a/0x1630 [ 210.764004][ C1] process_scheduled_works+0xc3d/0x1630 [ 210.769649][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 210.775689][ C1] ? assign_work+0x3cf/0x5d0 [ 210.780379][ C1] worker_thread+0xa47/0xfb0 [ 210.785072][ C1] kthread+0x38b/0x470 [ 210.789220][ C1] ? __pfx_worker_thread+0x10/0x10 [ 210.794393][ C1] ? __pfx_kthread+0x10/0x10 [ 210.801048][ C1] ret_from_fork+0x514/0xb70 [ 210.805770][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 210.811263][ C1] ? __switch_to+0xc89/0x1420 [ 210.816019][ C1] ? __pfx_kthread+0x10/0x10 [ 210.820679][ C1] ret_from_fork_asm+0x1a/0x30 [ 210.825509][ C1] [ 210.828562][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 210.835956][ C1] CPU: 1 UID: 0 PID: 3399 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 210.846154][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.856241][ C1] Workqueue: events_unbound flush_to_ldisc [ 210.862105][ C1] Call Trace: [ 210.865416][ C1] [ 210.868565][ C1] vpanic+0x56d/0xa60 [ 210.872596][ C1] ? __pfx__printk+0x10/0x10 [ 210.877345][ C1] ? __pfx_vpanic+0x10/0x10 [ 210.881894][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 210.887237][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 210.892506][ C1] panic+0xc5/0xd0 [ 210.896270][ C1] ? __pfx_panic+0x10/0x10 [ 210.900738][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 210.905848][ C1] __warn+0x315/0x4c0 [ 210.909877][ C1] ? __netif_receive_skb_core+0x294/0x30c0 [ 210.915731][ C1] ? __netif_receive_skb_core+0x294/0x30c0 [ 210.921593][ C1] __report_bug+0x276/0x570 [ 210.926167][ C1] ? __netif_receive_skb_core+0x294/0x30c0 [ 210.932067][ C1] ? __pfx___report_bug+0x10/0x10 [ 210.937141][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 210.942427][ C1] ? rcu_is_watching+0x16/0xb0 [ 210.947264][ C1] ? try_to_take_rt_mutex+0x842/0xb00 [ 210.952697][ C1] ? __netif_receive_skb_core+0x294/0x30c0 [ 210.958555][ C1] report_bug+0x16b/0x220 [ 210.962956][ C1] ? __netif_receive_skb_core+0x294/0x30c0 [ 210.968903][ C1] ? __netif_receive_skb_core+0x296/0x30c0 [ 210.974757][ C1] handle_bug+0x9c/0x200 [ 210.979051][ C1] exc_invalid_op+0x1a/0x50 [ 210.983628][ C1] asm_exc_invalid_op+0x1a/0x20 [ 210.988517][ C1] RIP: 0010:__netif_receive_skb_core+0x294/0x30c0 [ 210.995242][ C1] Code: f8 4d 8d b7 b8 00 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 87 2a 00 00 45 8b 36 41 29 de eb 0c e8 0d 8c 9c f8 90 <0f> 0b 90 45 31 f6 48 8d 9c 24 e0 00 00 00 48 c7 84 24 b0 00 00 00 [ 211.014885][ C1] RSP: 0018:ffffc9000fb47200 EFLAGS: 00010246 [ 211.021005][ C1] RAX: ffffffff892a0f53 RBX: 000000000000ffff RCX: ffff8880331bbe80 [ 211.029107][ C1] RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000000000000100 [ 211.037121][ C1] RBP: ffffc9000fb47430 R08: 0000000000000100 R09: 0000000000000100 [ 211.045221][ C1] R10: dffffc0000000000 R11: fffffbfff1f640f0 R12: 0000000000000000 [ 211.053256][ C1] R13: dffffc0000000000 R14: 0000000000000040 R15: ffff8880318f0140 [ 211.061810][ C1] ? __netif_receive_skb_core+0x293/0x30c0 [ 211.067709][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 211.072802][ C1] ? __lock_acquire+0x747/0x2de0 [ 211.077811][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 211.083759][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 211.089923][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 211.095960][ C1] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 211.101326][ C1] ? lock_acquire+0x115/0x350 [ 211.106184][ C1] ? process_backlog+0x261/0xc50 [ 211.111574][ C1] process_backlog+0x351/0xc50 [ 211.116506][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 211.122837][ C1] __napi_poll+0xae/0x550 [ 211.127522][ C1] net_rx_action+0x621/0xd70 [ 211.132458][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 211.138291][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 211.143755][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 211.149626][ C1] ? rt_spin_unlock+0x165/0x200 [ 211.154556][ C1] handle_softirqs+0x1da/0x6d0 [ 211.159400][ C1] __local_bh_enable_ip+0x16f/0x2b0 [ 211.164771][ C1] netif_rx+0xb9/0xf0 [ 211.168993][ C1] slcan_receive_buf+0x1c5f/0x2140 [ 211.174184][ C1] ? __pfx_slcan_receive_buf+0x10/0x10 [ 211.179718][ C1] ? ldsem_down_read_trylock+0x13d/0x1b0 [ 211.186019][ C1] ? tty_ldisc_ref+0x1c/0x90 [ 211.190757][ C1] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 211.196840][ C1] ? __pfx_slcan_receive_buf+0x10/0x10 [ 211.202390][ C1] tty_ldisc_receive_buf+0x119/0x160 [ 211.207931][ C1] tty_port_default_receive_buf+0x6e/0xa0 [ 211.213891][ C1] flush_to_ldisc+0x247/0x6c0 [ 211.218631][ C1] ? process_scheduled_works+0x97a/0x1630 [ 211.224495][ C1] process_scheduled_works+0xc3d/0x1630 [ 211.230509][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 211.236550][ C1] ? assign_work+0x3cf/0x5d0 [ 211.241200][ C1] worker_thread+0xa47/0xfb0 [ 211.245887][ C1] kthread+0x38b/0x470 [ 211.250106][ C1] ? __pfx_worker_thread+0x10/0x10 [ 211.255306][ C1] ? __pfx_kthread+0x10/0x10 [ 211.260130][ C1] ret_from_fork+0x514/0xb70 [ 211.264776][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 211.269937][ C1] ? __switch_to+0xc89/0x1420 [ 211.274687][ C1] ? __pfx_kthread+0x10/0x10 [ 211.279681][ C1] ret_from_fork_asm+0x1a/0x30 [ 211.284512][ C1] [ 211.292036][ C1] Kernel Offset: disabled [ 211.296413][ C1] Rebooting in 86400 seconds..